Keep track of your WordPress site's security and health by connecting it to Controla.
Protect your WordPress origin by requiring a secret request header and blocking direct access with Apache .htaccess rules.
Premium WordPress security with WAF, brute force block, URL obfuscation, malware scanning, and core reinstallation.
Connect your site to Webfiable (webfiable.com) to track config health and get security recommendations. Public early access (white march). Free.
A basic security plugin for WordPress 4.x, 5.0 or higher. You can selectively disable unused features in WordPress core...
Twelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.
WordPress and hosting security scanner with plain-English findings, safe hardening actions, reports, and Pro AI summaries.
Selectively disable WordPress features to improve performance, security, and cleanliness. Toggle each feature individually from a single settings page.
Environment-aware security: firewall, malware & integrity scan, brute-force protection and 2FA — safety-first, with previews and rollback.
This plugin will check for a user named 'admin' and prompt the user to create a new account.
The WeSecur plugin audits and protects your WordPress by daily analyzing malware, blacklists and vulnerabilities that can be exploited to infect your website and blocking attacks and spambots with tools specially designed to protect your WordPress.
Comprehensive WordPress security auditor. Scans for vulnerabilities, misconfigurations and threats — scored report with actionable fix steps.
Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.
Control what each active plugin is allowed to do. Allow or deny specific permissions per plugin, with immediate effect.
A simple way to clean and secure WordPress by disabling unnecessary features like comments, XML-RPC, and RSS feeds.
Adds some extra security to your WordPress with only one click.
Firewall, Scanner, Login Protect, block user enumeration and TOR, disable Json WordPress Rest API, xml-rpc (xmlrpc) & Pingback.
Privacy-first WordPress security hardening, login protection, and local audit logging.
A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.
Hide or decoy plugin, theme and core versions from scanners. Neutralize XML-RPC and lock down WP-Cron.